15 matches found
EUVD-2026-98019
Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains a missing authorization vulnerability in certain endpoints that fail to enforce proper role checks when modifying record status. Authenticated low-privileged attackers can invoke these endpoints to alter data beyond their permitted...
CVE-2026-109669
Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a missing authorization vulnerability in which certain endpoints fail to enforce proper authorization checks on record status changes. Authenticated low-privileged users can call these endpoints to modify data beyond their permitted...
CVE-2026-109669
The Frappe ERPNext software is vulnerable to a missing authorization flaw in versions prior to 15.110.0 and 16.x before 16.21.0 . The root cause is that certain endpoints fail to enforce proper authorization checks when modifying record statuses. This allows authenticated low-privileged users to ...
CVE-2026-109669 Frappe ERPNext before 15.110.0 Missing Authorization Allows Unauthorized Status Modification
Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a missing authorization vulnerability in which certain endpoints fail to enforce proper authorization checks on record status changes. Authenticated low-privileged users can call these endpoints to modify data beyond their permitted...
CVE-2026-109628
Frappe ERPNext versions prior to 15.121.0 and 16.x before 16.34.0 are susceptible to a missing authorization vulnerability (CWE-862). Certain endpoints fail to enforce mandatory role checks when modifying record statuses, allowing authenticated low-privileged attackers to manipulate data outside ...
CVE-2026-109628: Missing Authorization
Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains a missing authorization vulnerability in certain endpoints that fail to enforce proper role checks when modifying record status. Authenticated low-privileged attackers can invoke these endpoints to alter data beyond their permitted...
gnutls: gnutls: Security bypass allows acceptance of revoked server certificates via crafted OCSP response
A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol OCSP response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses, a client with OCSP verification enabl...
CVE-2021-47853
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2026-22852
creationtimestamp| type| source ---|---|--- 2026-01-14 20:02:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcfuelgoe72x...
CVE-2024-11464
creationtimestamp| type| source ---|---|--- 2024-12-07 11:16:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113611255367043393 2024-12-07 14:12:34+00:00| seen| https://t.me/cvedetector/12322...
CVE-2024-53738
creationtimestamp| type| source ---|---|--- 2024-11-30 20:55:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113573896930613643 2024-12-01 09:18:21+00:00| seen| https://t.me/cvedetector/11717...
PT-2023-14352 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The record has been rejected due to non-compliance with CNA rules as it has not been used. The information is available via the National...
PT-2023-14336 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The record was rejected due to non-compliance with CNA rules as it has not been used. The information is available via the National Vulnerabilit...